Port Forwarding Rules

The port forwarding rule can specify destination ports of your Synology DiskStation that will receive packages from specific ports of your router.

To set up port forwarding rules, please check your network configuration and refer to the following sections.

For Wireless Hotspot configuration

Click Create to open the Port Forwarding wizard.

There are two ways to add port forwarding rules:

You can use the following syntax to specify port numbers and range.

Note: Each port of the gateway router can be used for one forwarding rule only. Using a router port for two or more rules will cause conflicts, and a warning message will appear on the screen. You need to set another port in the rule to avoid conflicts.

To save rules:

Click Save after creating the rules. Otherwise, the rules won't be applied.

After saving the rules, you might need to wait for a few minutes before the rules start working, depending on the models of your routers.

To test whether your rules are working or not:

Choose the rules you want to test and click Test Connection. The result will be displayed in the Connection Test Result column.

For Wireless Router configuration

When the Network Map Configuration of your DiskStation is Wireless Router, port forwarding rules will be carried out directly by DiskStation.

To add port forwarding rules:

  1. Click Create to open the setup window.

  2. Specify the Service name, Protocol (TCP or UDP), Private IP Address, Private Port and Public Port.

  3. Click Create at the bottom to complete the settings.

DMZ

You can enable DMZ on your DiskStation when the Network Map Configuration is Wireless Router. A host in the DMZ can connect directly to the external network, free from limitation and protection of the firewall. It is usually used for setting up servers.

To enable DMZ:

  1. Click DMZ Settings to open the setup window.
  2. Tick the Enable DMZ checkbox.
  3. Enter your DMZ Host IP address.
  4. Click Apply.

Note: From the external network, you will need an external IP address retrieved by DiskStation to connect to a host in the DMZ.

____
*Some routers don't allow using custom ports for system services forwarding.